4236 matches found
EUVD-2025-114043
Malicious code in enif-xanthus-spinner-run-script npm...
EUVD-2025-122381
Malicious code in run-script-charon-rigel-koa npm...
EUVD-2025-122020
Malicious code in server-passport-run-script-acamar npm...
MAL-2025-141364 Malicious code in cygnus-cache-magellan-run-script (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 871df337f77dbbb8e35ff5cf417b96faddccf076a47434e71e0ee1943d2ab16a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140998 Malicious code in commitlint-zenobia-run-script-superagent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16404836c6f02879318bd5e43d055f2dac1eb55ecd652eff9934d63f3c3f7e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122383
Malicious code in run-script-bulma-jupiter-magellan npm...
EUVD-2025-121161
Malicious code in transform-lyra-run-script-cosmiconfig npm...
EUVD-2025-114390
Malicious code in dotenv-parse-variables-electron-builder-rocket-run-script npm...
EUVD-2025-113126
Malicious code in got-run-script-proxima-await npm...
EUVD-2025-120322
Malicious code in xanadu-run-script-ceres-loopback npm...
EUVD-2025-121596
Malicious code in stream-run-script-got-morgan npm...
EUVD-2025-123078
Malicious code in pulsar-run-script-redis-convict npm...
EUVD-2025-111595
Malicious code in loglevel-run-script-cross-env-superagent npm...
EUVD-2025-122384
Malicious code in run-script-await-ini-ariel npm...
EUVD-2025-124196
Malicious code in oauth-corvus-atlas-run-script npm...
Malicious code in run-script-nconf-hermes-commitizen (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ef6b1061299d5a40c1afa8a79be5c0c34df15a6f6cb207fc51e33fec9000cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in got-run-script-proxima-await (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfa04a34a8e56c5c772f14564f419592876e974653aa8279f0dfc3c83c0256b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120716
Malicious code in vuetify-loop-convict-run-script npm...